Get hands-on training for JIRA Software, Confluence, and more at Atlassian Summit Europe. Register now ›

atlascamp2010.jpg

Today we’re concluding our tour of the AtlasCamp 2010 videos with three great talks: Big Module Plugins; Securing Your Plugin; and Using Advanced Javascript in Atlassian Plugins. Last week we saw videos on marketing a commercial plugin, performance for JIRA plugins, and the Atlassian Platform. Happy holidays, and see you at AtlasCamp 2011! Details aren’t planned yet, but follow @atlascamp to get updates.

Big Modular Plugins – John Kodumal

John shows how to create modular Atlassian plugins, or plugins that are imported, depended on, and required by other plugins. Highlights include:

  • Plugins can use Java libraries for shared and extended functionality
  • Plugins can talk to other plugins with component-import
  • Custom permissions provide control for plugin integration with PermissionEnforcer.java

Securing Your Plugin – Penny Wyatt

Penny gives a comprehensive view of potential Atlassian plugin vulnerabilities and security, providing examples and solutions to each possible vulnerability. Highlights include:

  • Use HTML encoding whenever displaying user data to avoid XSS hacks. Atlassian products provide functions for HTML encoding
  • XSRF vulnerabilities are also possible, avoidable by using limited-duration tokens issued by the server
  • Confluence has a WebSudo mode, which requires an administrative password to perform an action
  • Files can be executed and modified, so be sure to limit administrators and users to isolated directories on the server
  • Use java.security.SecureRandom for secure random number generation

Needs More jQuery: Using Advanced Javascript in Atlassian Plugins – Zach Davis

Zach talks about user interface development in Atlassian plugins, specifically recommending AUI as the best approach. He also shows us why Atlassian chose jQuery for a Javascript framework. Highlights include:

  • The Atlassian User Interface (AUI) is based on jQuery
  • AUI allows a plugin developer to create consistent UI components: dropdowns, toolbars, dialogs, and more
  • AUI provides functions for keyboard shortcuts
  • Learn more about AUI with the Atlassian User Interface Documentation

Fresh ideas, announcements, and inspiration for your team, delivered weekly.

Subscribe now

Fresh ideas, announcements, and inspiration for your team, delivered weekly.

Subscribe now